1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    GertjanG
    @icoso Added to this : @SteveITS said in Snort Alert list explanation: If Snort is running on WAN then be aware since it runs outside the firewall it will scan packets the firewall will drop. If your WAN IP can be reached by everybody (== the entire internet) then having Snort 'listening' on WAN is a not a good idea. What would happen when 'some one' sends you a load of packets that were known in advance to trigger your snort ? So every packet will kick Snort into action, eating away loads of CPU cycles and logging a lot of lines = disk space. 'Some one' doing nearly nothing, and you will be stressing your own firewall. The short conclusion : never ever Snort on WAN. The main conclusion : Snort on WAN can be done, but keep a permanent eye on it. Btw : the default WAN behavior is "block" anyway. edit : You might say : I activate Blocking mode, so every suspected traffic will hit 'the wall'. Afaik, snort places itself in front of the firewall, so it still 'sees' the traffic, reacts upon it, decide to block the IP, finds the IP was already blocked etc.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @BiloxiGeek said in DNSBL and IPv6: Does it just follow the IPv4 address that is listed above that? In my case it would end up being ::10.0.0.86 Yes. In this specific context that's the notation being used. (Full IPv6 web server address, for reference then, would be: http://[0000:0000:0000:0000:0010:0000:0000:0086]) Nota bene: I use 0.0.0.0 which renders the DNSBL webserver useless and inaccessible, but otherwise returns 0.0.0.0 or ::/NOERROR answers to all blocked lookups.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    501 Topics
    3k Posts
    A
    Hi, Please help to forward / report the bugs in ACME 1.0 package. Thanks.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1

  • Discussions about the Tailscale package

    90 Topics
    610 Posts
    E
    Updated CE 2.7.2 to 1.86.4_1 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4_1.pkg Freshports

  • Discussions about WireGuard

    699 Topics
    4k Posts
    S
    @Bob.Dig what's the right place?
Log in to post
Load new posts
  • jimpJ

    LCDProc package version 0.11.3

    Locked
    5
    0 Votes
    5 Posts
    969 Views
    jimpJ
    @fireodo said in LCDProc package version 0.11.3: @jimp said in LCDProc package version 0.11.3: I see the problem there, I have a fix ready, I'll include it in my next update sometime this week depending on how much time I have available Glad you found the culprit - anyway, there is no hurry! Thanks a lot! I just pushed the new version with the fix for this, it should be available soon. https://forum.netgate.com/topic/181790/lcdproc-package-version-0-11-4
  • aaronsshA

    FreeRADIUS MAC authentication

    15
    0 Votes
    15 Posts
    9k Views
    keyserK
    @aaronssh Well, I’m using mac-auth and my clients are entered on the MAC addresses sheet, so it does work in the right configuration. But if you are not going to use 802.1x you can just create the MAc addresses as users.
  • T

    nrpe 3.1_6 service control broken on pfSense 2.7.0

    6
    0 Votes
    6 Posts
    1k Views
    D
    seems that the service entry in config.xml is not updated automatically. on an untouched system, after update to nrpe 4.1, config.xml still looked like this: <service> <name>nrpe</name> <rcfile>nrpe3.sh</rcfile> <executable>nrpe3</executable> with this the service was not starting. after removing the "3"s I can start the service from web gui.
  • O

    Please point out I am an idiot....

    5
    0 Votes
    5 Posts
    786 Views
    N
    Obviously a troll post.
  • M

    Syslog-ng forwarding via TCP not working?

    3
    1 Votes
    3 Posts
    2k Views
    M
    @flink4 - thanks! I've hacked something else in place for the time being, but will try this out when I find the time!
  • jimpJ

    LCDProc package version 0.11.2

    Locked
    5
    2 Votes
    5 Posts
    1k Views
    fireodoF
    @jimp said in LCDProc package version 0.11.1: It seems to work here in some local testing. Works here too - many thanks! [image: 1689773875658-lcd-display-mi4300yl-270.jpg]
  • V

    Grafana Dashboard using Telegraf with additional plugins

    173
    11 Votes
    173 Posts
    89k Views
    B
    @thimplicity You should see this being mentioned above https://forum.netgate.com/post/992280
  • D

    MPD5 port / package install.

    1
    0 Votes
    1 Posts
    448 Views
    No one has replied
  • S

    pfSense-pkg-softflowd: not sending data to log collector

    2
    0 Votes
    2 Posts
    791 Views
    D
    @soheil-amiri Check documentation for sample rate and tcp timeout options for softflowd. Adjust them to suit your traffic. This hints at why you might see less netflow stats arriving at your log server than you're expecting.
  • jimpJ

    OpenVPN Client Export package v1.9

    2
    6 Votes
    2 Posts
    773 Views
    jimpJ
    One thing I have noticed: If you already have OpenVPN installed, the export package installer for 2.6.x will offer to uninstall the client instead of installing it on top of itself or skipping that step automatically. You can X out of that part of the installer if you want to leave the currently installed client alone, then it will go on and prompt to do the next part of the process which copies the configuration file into place.
  • T

    PFsense 23.05.1-RELEASE- OpenVPN Not Showing Client Export Tab

    Moved
    3
    0 Votes
    3 Posts
    661 Views
    T
    @jimp This was the fix THANK YOU!
  • frogF

    Freeradius Google auth not working

    4
    0 Votes
    4 Posts
    780 Views
    GertjanG
    @frog said in Freeradius Google auth not working: https://vorkbaard.nl/how-to-set-up-openvpn-with-google-authenticator-on-pfsense/ Maybe. I would prefer using the original info, written by the one who actually build and created the system. For info about your Tesla, would you seek help on www.ford.com ?
  • S

    arpwatch 0.2.1 no service autostart after upgrade 2.6.0 -> 2.7.0

    2
    0 Votes
    2 Posts
    348 Views
    S
    Three systems tested, all three with the same issue. As workaround I configured service watchdog to start the services after reboot.
  • ?

    Avahi package does not survive a config restore on pfsense 2.6.0 due to missing avahi-daemon package

    23
    0 Votes
    23 Posts
    2k Views
    ?
    @SteveITS 2.7.0 CE fixed the restore issue with Avahi for me. However, I can only confirm it as "fixed" on a single pfsense box with a maximum of 2-3 restores. My pfsense has only been updated a few days ago. Early days, without another user also confirming it as fixed I would say.
  • JeGrJ

    Filer Package XMLRPC Sync error

    3
    0 Votes
    3 Posts
    786 Views
    J
    @JeGr I was able to fix it by changing line 221 in /usr/local/pkg/filer.inc from: $execcmd .= "sync_package_filer();"; to $execcmd .= "filer_sync();";
  • P

    Centralized pfSense Management Interest

    7
    3 Votes
    7 Posts
    3k Views
    R
    @occamsrazor So I've tried DynFi and seen that it has some great features, but the centralized management features are limited. I think it's better for Day N where you're monitoring and tweaking the devices after they're set up. In a fleet of business owned firewalls, you would want to define configuration based on policies at a global level, site level and individual firewall level. The global and site level config is very minimal with what I think I can do with DynFi - what would be ideal is something like: Creating a firewall rule for a secure maintenance access via properly configured SSH over VPN. A site level config example may be configuring a CA and certs for 4 firewalls that an MSP is responsible for, an individual firewall config might be all the unique stuff like hostname, etc for that firewall. With a centralized management platform offering, the firewall could have a script to check the central platform during boot for ownership of the serial number and then attach itself to the platform. This Zero Touch Provisioning feature means I don't have to travel all over the country setting up firewalls, I could have the option of using a contractor to rack and plug the box in and then hand it off to me to do the rest remotely. Those are some savings, efficiency and quality of life upgrades I know businesses would want to pay for. I'm sure Netgate already knows this, but business customers are the type looking to purchase verified Netgate brand hardware with support contracts. I'm currently going through a POC to try out all the competition and I can say what I described here is hilariously hit or miss across all the big vendors. Very few are doing a great job with this or they make it difficult to POC those features. Meanwhile, the first setup to cross the finish line in lab was of course pfsense plus and DynFi so Kudos for the "ease of setup"!
  • D

    2.7.0 release has broken package management for 2.6.0 ?

    8
    0 Votes
    8 Posts
    3k Views
    D
    @SteveITS said in 2.7.0 release has broken package management for 2.6.0 ?: @DBMandrake https://redmine.pfsense.org/issues/10464 It's a long standing issue. Don't install packages for the wrong version. (yes I know that isn't what was intended) In the past it would try, and do things like upgrade PHP, breaking the old version. The problem is, whether I tried to manually install a package via the GUI or not, some background process had already attempted to update some system packages (not those listed in the GUI) and in the process broken the pkg command itself. (although I notice the GUI uses pkg-static) See my other thread. This happened on four different systems, three of which I didn't even log into until I was aware of the issues on the first system, so definitely something that happened automatically as a result of the package repositories being updated on the servers. I had to manually fix the pkg command on all four systems and they still complain about the fact that the FreeBSD package library is now using a newer database version than it should be. This really shouldn't be happening without user interaction. I haven't experienced these problems before because this is the first time that "Current" has changed versions in the repositories since I've been using PFSense. (Since I started with 2.6.0 which has been out for 1 1/2 years now) Change System/Update/Settings to Previous Stable branch to be on 2.6, then install/update packages. That doesn't fix the pkg command at the command line though, I had to fix that manually.
  • H

    Package Manager not showing some packages

    Moved
    18
    0 Votes
    18 Posts
    2k Views
    bmeeksB
    @hauy said in Package Manager not showing some packages: @bmeeks I figured it out. I deactivated and reactivated the service and it seems to work now. Thanks again for your help! That likely means some piece of the configuration was incomplete, and making that change and saving it caused the package GUI code to rewrite the configuration.
  • F

    rrd_summary: no data

    7
    0 Votes
    7 Posts
    976 Views
    S
    @FollyDude-0 Currently running on pfsense 2.7.0
  • R

    FreeRadius reinstall maintains old config

    Moved
    2
    0 Votes
    2 Posts
    529 Views
    johnpozJ
    @Raven7362 I don't fell like testing if can duplicate your problem, because well kind of using my config ;) But if your having issues, all of the conf files and such are stored here /usr/local/etc/raddb/ I would assume you could uninstall freerad package, then remove all those files.. Then reinstall package. you can view their path and files in the view config in the freerad package gui section.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.